Privacy Policy

1. Overview

BodyBalancer (“we” or “us”) operates the mobile app Shellog and the web service BodyBalancer (video posture analysis, My Page and business mode at bodybalancer.app; the “web service”). We process personal information in accordance with Korea’s Personal Information Protection Act and other applicable laws. Shellog is the successor to the BodyBalancer app.

Our services provide posture analysis signals for reference only. They are not a medical device and do not replace medical diagnosis or treatment.

2. Information we process in the Shellog app

You can use Shellog without signing up. Linking an account (Sign in with Apple, Google or Kakao) is optional, and we don’t ask for your name or phone number.

• Linked account (only if you sign in): the email address of the account you sign in with. When you sign in, our server confirms your email with the sign-in provider and issues a signed sign-in token containing it, which is kept on your device. We use the email to link your account and to confirm it’s you when you delete your account. Signing in with Apple or Google doesn’t create an account record on our server. If you sign in with Kakao, we store your Kakao member number paired with your email so that we can handle it if you disconnect Shellog in your Kakao account.
• Posture photos: sent to our server when you take photos and request an analysis in the tech neck test (one side photo) or a posture check-in (one front and one side photo). Photos are kept in private storage and reach the analysis engine only through a signed link that expires after 15 minutes.
• Analysis results: posture score, posture signals and levels by body area, a summary sentence, and the time of analysis (no photos)
• Pond (only if you use it): a random identifier the app creates on your device, the name shown in your pond, a posture band (your latest check-in result in one of three levels; your score is not sent), plates this week, streak, last active day, pond code, and pokes (sender’s name and time)
• Processed automatically: your IP address, used only to count requests so that we can block excessive requests in a short time. It is deleted automatically after one minute.

We store posture photos and analysis results without linking them to your account (email) or device identifier.

Information stored only on your device

Progress photos and timelapses, your measurement history, streak and plate records, notification settings, and whether you asked to hear when Plus opens are stored only on your device and are not sent to us. They are removed when you delete the app or use “Clear records on this device” in the app’s settings. If you use a pond, the pond items above (posture band, plates, streak, last active day) are sent to our server.

What your pond friends can see

Friends in the same pond can see the name you chose, the posture band from your latest check-in, plates this week, streak, and last active day. They can’t see your photos, scores or device identifier. A pond forms only among people you share your pond code with.

Share cards

You send result cards and timelapse cards yourself with your device’s share feature, and they don’t pass through our server. Result cards contain no photos, and timelapse cards blur the face area by default.

Shellog uses the camera permission (when you take photos) and the notification permission (optional, for reminders scheduled on your device). Because reminders are scheduled only on your device, we don’t receive a push token. When you save a share card or timelapse to your photo library, your phone may ask for permission to add photos; Shellog doesn’t read your photo library. Shellog doesn’t use microphone or location permissions, and doesn’t use advertising or usage analytics tools.

3. Information we process in the web service

• Required: email address, phone number
• Optional: name, main areas of discomfort (neck, shoulders, lower back, pelvis, knees, other)
• When you request an analysis: the posture video you upload, height (required), weight (optional), age group, usual daily routine, average hours spent sitting per day, the areas that bother you most (multiple choice), your own posture score estimate (1 to 100), how often you feel pain or discomfort, pain intensity in the area that bothers you most (1 to 10), methods you have tried to improve posture or pain (multiple choice), and how much you would spend on posture care per month
• When you create a BodyBalancer account (My Page, the earlier BodyBalancer app): name, email address, and records of your agreement to the terms and age confirmation. If you sign up with Google, the email, name and profile information Google provides
• Business (studio) mode: member names, memberships and measurement records entered by the business user. The business that enters this information is responsible for handling it, including obtaining consent to collect and use it; we provide the storage infrastructure.
• Collected automatically: IP address, cookies, access times, browser and device information, and visit and usage records (through web analytics tools)
• Service usage statistics (the earlier BodyBalancer app, collected automatically): names and counts of feature-use events (for example, submitting a measurement or starting a routine). Account identifiers are converted into pseudonymous values that can’t be reversed and aggregated by day. We don’t collect screen content, measurements or free-text input.

The earlier BodyBalancer app used the camera, microphone (video recording), photo library and notification permissions for capture and analysis. Each permission is requested only when you use the related feature, and you can still use features other than capture and notifications if you decline.

4. Why we use it

• To analyze your posture and provide results (scores, types and reports)
• To run Shellog ponds (showing friends’ turtles, weekly plate rankings and pokes)
• To link your Shellog account (sign-in), handle disconnections, and confirm your identity when you delete your account
• To improve analysis accuracy and service quality
• To receive web analysis requests, send reports and contact you about the service
• To prevent misuse and respond to inquiries

5. Sensitive information

To provide posture analysis, we collect and use sensitive information (health-related information) under Article 23 of Korea’s Personal Information Protection Act.

• Items: posture photos (Shellog); posture videos, height, weight, areas and intensity of pain or discomfort, and posture self-assessments (web service)
• Purpose: analyzing posture imbalance and providing results
• Retention: one year after the analysis is completed, or until you ask us to delete it (we delete it without undue delay on request)

You have the right to refuse consent to the collection of sensitive information, but we can’t provide posture analysis without it. In Shellog, no posture photo is sent unless you take one and request an analysis.

6. How long we keep it

• Shellog posture photos (originals): deleted automatically 365 days after upload, or without undue delay if you ask us to delete them.
• Web analysis videos and photos (originals): kept to provide the service and improve analysis accuracy, deleted automatically 365 days after upload, or without undue delay if you ask us to delete them.
• Analysis results and visualization images: deleted automatically 180 days after they are created, or immediately when you ask us to delete them.
• Shellog pond information: when you leave a pond or use “Clear records on this device”, your information in that pond and the pokes you received are deleted, and when the last member leaves, the whole pond is deleted. The “last week’s winner” label (a name) may remain until the next week’s count replaces it.
• Shellog pokes: deleted once the recipient sees them in the app.
• Shellog sign-in token: kept only on your device and removed from it when you sign out or delete your account. It stops working 30 days after it is issued.
• Kakao member number and email pair: until you delete your Shellog account or disconnect Shellog in your Kakao account
• IP addresses used to limit requests: deleted automatically after one minute
• Information stored on your device by Shellog: kept only on your device until you delete the app or use “Clear records on this device”
• Email and contact details (web service): until the purpose of service communications ends or you ask us to delete them
• Access logs and cookies: generally within one year (according to the default retention policies of the web analytics tools)
• Service usage statistics: kept as pseudonymous aggregates for 90 days, then deleted automatically

Where the law requires us to keep information, we store it separately for the required period and then delete it.

7. Processors

We entrust the following companies with processing personal information to run our services. Each processes personal information only on our instructions and within the scope of the entrusted work.

• Vercel Inc.: web and API hosting; storage of posture photos, videos and analysis results (Blob)
• Hugging Face, Inc.: computing posture metrics from photos and videos (running the analysis engine)
• Upstash, Inc.: temporary storage (Redis) of account and result links, Shellog pond information, Kakao member number and email pairs, and IP addresses used to limit requests
• Google LLC: recording requests (Google Sheets / Apps Script), social sign-in (Google Sign-In), web usage statistics (Google Analytics)
• Apple Inc.: Shellog social sign-in (Sign in with Apple)
• Kakao Corp.: Shellog social sign-in (Kakao Login)
• Slack Technologies: internal notifications of requests, Shellog account deletion notifications
• Meta Platforms Ireland Ltd.: measuring web ad performance and tracking conversions (Meta Pixel, once it is in operation)
• Resend: sending service emails such as sign-in links and analysis reports

8. Transfers outside Korea

To provide our services, we process personal information outside Korea as listed below. It is sent over encrypted connections when you use the services, and the retention periods in section 6 apply (it is deleted without undue delay when our contract with the processor ends).

• Vercel Inc. (United States): posture photos and videos, analysis results, web service usage information. Web and API hosting and storage
• Hugging Face, Inc. (United States): posture photos and videos. Computing posture metrics
• Upstash, Inc. (United States): account and result links, Shellog pond information, Kakao member number and email pairs, IP addresses used to limit requests. Storage
• Google LLC (United States): web request information, social sign-in information, web usage statistics
• Apple Inc. (United States): Shellog social sign-in information. Sign-in verification
• Slack Technologies (United States): web request notifications, Shellog account deletion notifications (email address)
• Resend (United States): email addresses and the content of service emails. Sending email
• Meta Platforms Ireland Ltd. (Ireland): web ad performance information

If you don’t want your information processed outside Korea, you can stop using the services and ask us to delete it as described in section 10. In that case, we won’t be able to provide posture analysis or other services.

9. Sharing with third parties

We don’t provide your personal information to third parties, except where the law requires it or investigative authorities request it through lawful procedures. What your pond friends can see in Shellog (section 2) is information you share yourself by joining a pond.

10. Your rights and how to exercise them

You can ask at any time to access, correct, delete or stop the processing of your personal information. Contact our privacy officer below, or use the data deletion request page on our website (in Korean), and we will handle your request without undue delay.

• Shellog account: in the app, go to More → Settings → Account, tap “Delete account” and confirm, and it is deleted right away. To delete it without the app, email tribalance@bodybalancer.app from the email address you signed in with. See Shellog account deletion for what is deleted and what is kept.
• Shellog pond information: deleted right away when you tap “Leave pond” in the app’s Friends tab.
• Shellog posture photos and analysis results: they aren’t linked to your account or device identifier, so we can’t tell which ones are yours, and deleting your account doesn’t delete them (they are deleted automatically after the periods in section 6). If you tell us the date and approximate time you took the photos, we will find and delete those photos and results.
• Information stored on your device by Shellog: removed when you use “Clear records on this device” in the app’s settings or delete the app. Clearing records also takes you out of your pond.

11. Automatic collection tools (cookies)

The web service uses automatic collection tools such as Vercel Web Analytics, Google Analytics and Meta Pixel (active when a pixel ID is set) to measure usage and ad performance. You can refuse cookies and ad tracking through your browser settings or Meta’s ad preferences (facebook.com/ads/preferences); some features of the service may be limited if you do. The Shellog app doesn’t use these tools.

12. Privacy officer

• Privacy officer: Minseo Ko (CEO)
• Email: tribalance@bodybalancer.app

13. Children

We don’t knowingly collect personal information from children under 14. Shellog doesn’t ask for your age, and if we learn that information from a child under 14 has been processed, we delete it without undue delay. Video analysis requests and BodyBalancer account sign-up on the web service are available only after you confirm that you are 19 or older.

14. Changes to this policy

We may update this policy when laws or our services change, and we will announce changes in the service in advance.